{
  "schema_version": "1.6.0",
  "id": "ACVE-2026-0524",
  "aliases": [],
  "published": "2026-09-10T00:00:00Z",
  "firstReported": {
    "date": "2026-09-10",
    "url": "https://www.anthropic.com/threat-intelligence-report-september-2026",
    "publisher": "Anthropic"
  },
  "modified": "2026-09-25T00:00:00Z",
  "summary": "More than 4,700 undisclosed Claude-powered personas conversed with at least 25,000 people over two weeks in a China-based studio's dating apps, according to secondary coverage of Anthropic's report.",
  "details": "## What\n\nAnthropic says a China-based app studio advertised a network of dating apps as fully human while using Claude to build the apps and power their AI personas. More than 4,700 personas conversed with at least 25,000 people in a two-week period.\n\n## Detection\n\nAnthropic identified the operation through its threat-intelligence investigation. Recorded from Anthropic's September 2026 threat report. Not recreated in a lab.\n\n## Fix\n\nDisclose automated personas, enforce platform abuse controls, and keep agent access tied to accountable operators.",
  "affected": [
    {
      "package": {
        "ecosystem": "AgentHarness",
        "name": "claude"
      },
      "ranges": [
        {
          "type": "SEMVER",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "type": "REPORT",
      "url": "https://www.anthropic.com/threat-intelligence-report-september-2026#scams-and-fraud-sep-26"
    },
    {
      "type": "ARTICLE",
      "url": "https://allaboutcookies.org/dating-app-matches-might-be-bots"
    },
    {
      "type": "ARTICLE",
      "url": "https://thenextweb.com/news/anthropic-claude-misuse-threat-intelligence-report"
    }
  ],
  "database_specific": {
    "severity": "MODERATE",
    "acve": {
      "specVersion": 1,
      "status": "candidate",
      "kind": "behavioural",
      "vulnClasses": [
        "over-privileged-combination"
      ],
      "cwe": [
        "CWE-693"
      ],
      "taxonomy": {
        "owasp_asi": [
          "ASI09"
        ],
        "atlas": [
          "AML.T0088"
        ]
      },
      "noCveReason": "No code defect: the harm arises from the agent pursuing the operator's deceptive goal in this configuration.",
      "cveBoundary": "behavioural",
      "threat": {
        "attacker": "user",
        "vector": "unsafe-default",
        "outcome": "harmful-action"
      },
      "evidence": [
        {
          "kind": "incident",
          "url": "https://www.anthropic.com/threat-intelligence-report-september-2026#scams-and-fraud-sep-26"
        }
      ],
      "fix": {
        "summary": "The studio ran the personas itself, so the control that protected users was Anthropic banning its accounts.",
        "actions": [
          {
            "type": "disable",
            "target": "anthropic.accounts",
            "to": "banned",
            "why": "Shipped by Anthropic: banned the attributed accounts and organizations and worked with industry partners.",
            "owner": "model-provider"
          }
        ]
      },
      "exposure": {
        "harness": {
          "value": "Claude used by a China-based dating-app studio",
          "any": false,
          "status": "confirmed",
          "source": "https://www.anthropic.com/threat-intelligence-report-september-2026#scams-and-fraud-sep-26"
        },
        "model": {
          "value": "Claude",
          "any": false,
          "status": "confirmed",
          "source": "https://www.anthropic.com/threat-intelligence-report-september-2026#scams-and-fraud-sep-26"
        },
        "goal": {
          "value": "Build and operate dating apps advertised as fully human",
          "stated": true,
          "status": "confirmed",
          "source": "https://www.anthropic.com/threat-intelligence-report-september-2026#scams-and-fraud-sep-26"
        },
        "tools": {
          "value": "Claude-powered AI personas and dating-app infrastructure",
          "status": "confirmed",
          "source": "https://www.anthropic.com/threat-intelligence-report-september-2026#scams-and-fraud-sep-26"
        },
        "approval": {
          "value": "The studio operated the persona network at scale with no reported user disclosure",
          "mode": "no-prompt-by-design",
          "status": "detected",
          "source": "https://www.anthropic.com/threat-intelligence-report-september-2026#scams-and-fraud-sep-26"
        },
        "inputControl": "operator",
        "agentAction": "The agent powers AI personas that present as human in conversations with dating-app users.",
        "harm": "harmful-action",
        "divergence": "instruction-followed",
        "reach": {
          "value": "Dating-app users and their conversations",
          "kinds": [
            "messaging"
          ],
          "status": "confirmed",
          "source": "https://www.anthropic.com/threat-intelligence-report-september-2026#scams-and-fraud-sep-26"
        },
        "condition": {
          "value": "When the studio used AI personas while advertising the service as fully human",
          "status": "confirmed",
          "source": "https://www.anthropic.com/threat-intelligence-report-september-2026#scams-and-fraud-sep-26"
        },
        "scale": {
          "statement": "More than 4,700 AI personas across more than 20 apps engaged at least 25,000 people over two weeks",
          "unit": "accounts",
          "value": 25000,
          "source": "https://allaboutcookies.org/dating-app-matches-might-be-bots"
        }
      },
      "occurrence": {
        "basis": "real-use",
        "reportedBy": "vendor",
        "responses": [
          {
            "party": "Anthropic",
            "status": "fixed",
            "statement": "Anthropic says it banned the attributed accounts and organizations and worked with industry partners.",
            "source": "https://www.anthropic.com/threat-intelligence-report-september-2026#scams-and-fraud-sep-26"
          }
        ]
      },
      "exploitation": {
        "status": "none-known",
        "checkedAt": "2026-09-24T00:00:00Z",
        "sources": [
          {
            "url": "https://www.anthropic.com/threat-intelligence-report-september-2026#scams-and-fraud-sep-26",
            "type": "research",
            "note": "Anthropic reported a real operation."
          }
        ],
        "kev": {
          "listed": false
        }
      },
      "claims": [],
      "reproducibility": {
        "status": "partial",
        "axesComplete": true,
        "componentsObtainable": null,
        "triggerPublished": false,
        "observableStated": true,
        "demonstrated": "reported-only",
        "missing": [
          "model availability not checked (no registry reference)",
          "trigger not published"
        ]
      },
      "severityBasis": "harm-reach"
    }
  }
}